$ ls kubernetes/reviews/ # the step-back reads
Kubernetes in review
One review per week (and month): what shipped, what broke, what to act on.
Nov 2–8, 2026 weekly [act] 8 stories
Kubernetes release v0.23.0 adds trixie kube-cross variant
client-go bumps golang.org/x/net to 0.62.0 for two CVEs, and the registry client no longer fetches foreign bundle layers.
Oct 26–Nov 1, 2026 weekly [plan] 8 stories
Kubernetes 1.38 clears two deprecated feature gates
ExecProbeTimeout and AllowOverwriteTerminationGracePeriodSeconds come out under the three-release emulation window, and CRD types move st...
Oct 19–25, 2026 weekly [plan] 8 stories
IPVS deprecation gains migration guide to iptables, nftables
Same week kubectl removed its OpenAPI v2 fallback and client-go rebuilt the unstructured extractor on v3, breaking any tooling still on t...
Oct 12–18, 2026 weekly [act] 8 stories
node-problem-detector 1.37.0 ships with three CVE fixes
kubectl drops its WebSocket opt-out flags, and the apiserver gains watch cache correctness fixes plus a beta size-estimate metric.
Oct 5–11, 2026 weekly 8 stories
Kubelet filters scoped link-local nameservers from pods
Scheduler_perf adds a workload-aware preemption baseline, and the release tooling moves off deprecated bom SBOM APIs.
Oct 1–31, 2026 monthly [act] 7 stories
node-problem-detector 1.37.0 patches three CVEs
The same release swaps OpenCensus for OpenTelemetry; elsewhere kubelet drops two deprecated feature gates and CRD types find a new home.
Sep 28–Oct 4, 2026 weekly [plan] 8 stories
Apiserver write throughput KEP opens as seven KEPs move
A wave of enhancement proposals, from hugepages reservation to DRA capacity requests, reshaped the 1.38 roadmap this week.
Sep 21–27, 2026 weekly 8 stories
v1.38 KEPs stack up: WebSockets GA, WAS and CRI streaming to beta
Three graduation KEPs head into the v1.38 milestone, while post-quantum ML-DSA signing lands in client-go and kubeadm.
Sep 14–20, 2026 weekly [act] 8 stories
Master drops containerd 1.7 over RuntimeConfig RPC
Kubelet's fallback to the configured cgroup driver is gone, and StorageClass declarative validation is now stable.
Sep 7–13, 2026 weekly [act] 8 stories
Kubernetes patches SSH DoS, ships quantity overflow fix
The SCTP and quantity changes land in kubernetes, plus golang.org/x/crypto moves to v0.56.0 to close CVE-2026-78662.
Sep 1–30, 2026 monthly [plan] 7 stories
Kubernetes patches SSH DoS CVE as 1.38 KEPs line up
Watch cache stops broadcasting unchanged resource versions, and quantity overflow fixes land to stop resource values wrapping silently.
Aug 31–Sep 6, 2026 weekly
Declarative validation for Condition.Message lands, graduates stable
apimachinery consumers adopt declarative validation as v1.37 gates drop and kOps prepares Amazon Linux 2027.
Aug 24–30, 2026 weekly
kOps 1.37 beta lands, GCE jobs and Kopeio dropped
The week centered on kOps 1.37.0-beta.1 and the removal of legacy networking and CI coverage, alongside fixes to the Kubernetes release p...
Aug 1–31, 2026 monthly
August Ships Kubernetes 1.37 RC and kOps 1.37 Beta
August delivered Kubernetes v1.37.0-rc.1 and kOps 1.37.0-beta.1, with kOps locking down cloud permissions and cutting bootstrap downloads...
Keep up with Kubernetes in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.
Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.